Attack Surface

Simple definition

All the points by which a system can be attacked.

Technical definition

The surface includes exposed services, accounts, applications, web interfaces, accesses, dependencies, cloud and physical components.

What is it used for ?

Reduce unnecessary items and prioritize protections.

Practical example

Close an old access RDP Unused Internet directly reduces the attack surface.

Common issues

• Services foregone exposed
• Orphan accounts
• Old applications not listed

Related terms

Network port · Firewall · Vulnerability

Key takeaway: This entry explains the general operation of the term. Exact settings may vary depending on software, vendors and environments.